In elfutils 0.175, there is a buffer over-read in the ebl_object_note function in eblobjnote.c in libebl. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted elf file, as demonstrated by eu-readelf.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade elfutils | Aug 22, 2024 | Jan 29, 2019 |
| Centos_linux | — | Upgrade elfutilsUpgrade elfutils-libelf-develUpgrade elfutils-develUpgrade elfutils-libelf-debuginfoUpgrade elfutils-default-yama-scopeUpgrade elfutils-debuginfoUpgrade elfutils-libs-debuginfoUpgrade elfutils-debugsourceUpgrade elfutils-libsUpgrade elfutils-libelf | Nov 6, 2019 | Jan 29, 2019 |
| Debian | — | Upgrade elfutils | Feb 14, 2019 | Feb 14, 2019 |
| Oracle_linux | — | Upgrade elfutils-libelf-devel-staticUpgrade elfutils-devel-staticUpgrade elfutils-libsUpgrade elfutils-libelf-develUpgrade elfutilsUpgrade elfutils-develUpgrade elfutils-libelfUpgrade elfutils-default-yama-scope | Oct 5, 2022 | Jan 9, 2019 |
| Redhat_linux | — | Upgrade elfutils-develUpgrade elfutils-libelf-develUpgrade elfutils-libelf-devel-staticUpgrade elfutils-libs-debuginfoUpgrade elfutilsUpgrade elfutils-devel-staticUpgrade elfutils-libsUpgrade elfutils-default-yama-scopeUpgrade elfutils-libelfUpgrade elfutils-libelf-debuginfoUpgrade elfutils-debuginfoUpgrade elfutils-debugsource | Nov 6, 2019 | Jan 29, 2019 |
| Suse | — | Upgrade libdwarves1Upgrade libdwarves-devel-32bitUpgrade elfutils-langUpgrade dwarvesUpgrade libelf1Upgrade libebl-pluginsUpgrade libelf1-32bitUpgrade libebl-develUpgrade libdw1Upgrade libdw1-32bitUpgrade libebl-plugins-32bitUpgrade libdwarves1-32bitUpgrade libdw-develUpgrade libasm1Upgrade elfutilsUpgrade libasm1-32bitUpgrade libelf-develUpgrade libelf-devel-32bitUpgrade libdwarves-develUpgrade libasm-devel | Aug 9, 2024 | Jan 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub